How do you manage database users, roles, and privileges with least privilege?

Question

Accepted Answer

Access control is about granting the minimum privilege needed for each job and attaching it to a role rather than a person. In PostgreSQL there is no separate "user" object — a user is just a role with LOGIN, and group roles are roles that other roles are members of.